Umbral Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Umbral Project records in CISA KEV

No Umbral Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Umbral 1 record MEDIUM

Records

1 record in Umbral · all components

TI-2022-13458 CVE-2022-31533 · GHSA-29m8-hp2v-37qc

The decentraminds/umbral repository through 2020-01-15 on GitHub allows absolute path…

MEDIUM 43

The decentraminds/umbral repository through 2020-01-15 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.01337 Published 2022-07-11 No fix listed CWE-22

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0